Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Hello again Malware Removal experts!I have noticed that a link I have stored in my favorites bar is not launching the correct site. Instead, it goes to an ad page. The link is : http://www.nwfraiders.org/ - a school site.

I have run AVira and TFC and that did not help or identify anything. Here is the DDS log. Please let me know what you suggest and if I should remove any old software or applications.ThanksDougster_______________________________

Take extra care in answering questions posed by any Uninstaller.-----------------------------------------------------------REBOOT (RESTART) Your Machine-------------------------------------------------Please download RogueKiller.exe and save it to your desktop.

Run RogueKiller

First, quit all running programs.

Start RogueKiller.exe. (Double click in XP)

Note: If the program is blocked, do not hesitate to try several times. If it really does not work (it could happen), rename it to winlogon.exe or RogueKiller.com.

Wait until prescan has finished.

Click on the Scan button in the upper right. Wait for it to finish.

When the scan is complete, a file icon named RKreport.txt should appear on your desktop.

Please double click that file RKreport.txt and post its contents in your next Reply. (You can also open the report by clicking the Report button on the right).

When you exit RogueKiller, you may get a popup reporting "None of the Elements have been deleted. Do you want to quit?" Click "Yes".

---------------------------------------------Download the OTL ScannerPlease download OTL.exe by OldTimer and save it to your desktop.---------------------------------------------Run a Scan with OTL

For WinXP, double click on the OTL icon to run it.

Check the boxes labeled :

Scan All Users

LOP check

Purity check

Extra Registry > Use SafeList

Make sure all other windows are closed to let it run uninterrupted.

Click on the Run Scan button at the top left hand corner. Do not change any settings unless otherwise told to do so.When the scan starts, OTL may appear to be frozen while it runs. Please be patient.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. (desktop)OTL.txt will be open on your desktop, and Extras.txt will be minimized in your taskbar. The Extras.txt file will only appear as a running Notepad document the very first time you run OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them as a reply. Use separate replies if more convenient.

Computer Name: LPFYVYC81 | User Name: v01665 | NOT logged in as Administrator.Boot Mode: Normal | Scan Mode: All usersCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

Computer Name: LPFYVYC81 | User Name: v01665 | NOT logged in as Administrator.Boot Mode: Normal | Scan Mode: All usersCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

Error - 02/10/2013 6:50:27 PM | Computer Name = LPFYVYC81 | Source = AutoEnrollment | ID = 15Description = Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted. Enrollment will not be performed.

Error - 02/10/2013 7:00:03 PM | Computer Name = LPFYVYC81 | Source = AutoEnrollment | ID = 15Description = Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted. Enrollment will not be performed.

[ System Events ]Error - 02/10/2013 5:05:45 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 29 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 5:35:45 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 59 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 6:35:47 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 120 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 6:50:17 PM | Computer Name = LPFYVYC81 | Source = NETLOGON | ID = 5719Description = No Domain Controller is available for domain CVGNET due to the following: %%1311. Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.

Error - 02/10/2013 6:50:19 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 6:50:20 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 6:59:54 PM | Computer Name = LPFYVYC81 | Source = NETLOGON | ID = 5719Description = No Domain Controller is available for domain CVGNET due to the following: %%1311. Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.

Error - 02/10/2013 6:59:56 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 6:59:56 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.

Error - 02/10/2013 7:14:57 PM | Computer Name = LPFYVYC81 | Source = W32Time | ID = 39452701Description = The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 29 minutes. NtpClient has no source of accurate time.

Let the program run unhindered, and click to allow the Reboot when it is done.When the computer Reboots, and you start your usual account, a Notepad text file will appear.

Copy the contents of that file and post it in your next reply. The FIX log file will also be available and named by timestamp here: C:\_OTL\Moved Files\mmddyyyy_hhmmss.log

----------------------------------------------After posting the Resulting log, Please Rescan as follows:Open OTL again and click the Quick Scan button. Post the new log it produces, OTL.txt, in your next reply.

Let the program run unhindered, and click to allow the Reboot when it is done.When the computer Reboots, and you start your usual account, a Notepad text file will appear.

You can IGNORE the file this time.

--------------------------------------------------------Download and Install the newest version of Adobe Reader for reading pdf files, due to the vulnerabilities in earlier versions.All versions numbered lower than 11.0.01 are vulnerable.Go HERE to download AdbeRdr11001_en_US.exeSave the file to your desktop and run it to install the latest version of Adobe Reader. After the new Reader is installed, Open Adobe Reader XI, as it is called, and OK the license.Click on Edit and select Preferences. On the Left, click on the Javascript category and Uncheck Enable Acrobat Javascript.Click on the Security (Enhanced) category and Uncheck Automatically trust sites from my Win OS security zones.Click on the Trust Manager category and Uncheck Allow opening of non-PDF file attachments with external applications.Click the OK buttonWhen it asks if you are sure you want to make changes to Advanced Security Preferences, answer Yes.When it finishes, you can remove the Installer from your desktop.

If the machine is behaving properly, you can start OTL and click the Clean Up button.This will remove most of our tools.

Askey1257,My machine is running fine now.Thank you again.You all are always the best in getting my questions answered and my machines running in tip top shape.Thank you and the team for all you do.Dougster

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.